Weakness (CWE)
CWE-261: Weak Encoding for Password
The product uses a weak or trivial encoding for a password.
How to prevent it (1 mitigation)
-
Passwords should be encrypted with keys that are at least 128 bits in length for adequate security.
Source: MITRE CWE-261
46 results · Feed
-
Low 3.0
MD5 hash support in github.com/foxcpp/maddy
### Impact This vulnerability affects maddy 0.5.1, 0.5.0 users using auth.shadow module and an extremely outdated system that still allows MD5 hashes in /etc/shadows. ### Patches Patch is available as part of the 0.5.2 release. ### Workarounds Ensure MD5 hash…
-
High 8.8
Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware vers…
-
Medium 5.5
Insecure crypto for storing passwords
In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior v…
-
Medium 5.9
This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA…
-
Critical 9.8
RVD#2565: Weak token generation for the REST API.
The access tokens for the REST API are directly derived from the publicly available default credentials for the web interface. Given a USERNAME and a PASSWORD, the token string is generated directly with base64(USERNAME:sha256(PASSWORD)). An unauthorized atta…
-
Unscored —
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay…